Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241211	2.1	注意	British Columbia Institute of Technology	-	CodeIgniter の _sanitize_globals 関数における任意のグローバル変数を設定解除される脆弱性	-	CVE-2007-3706	2012-06-26 15:46	2007-07-11	Show	GitHub Exploit DB Packet Storm

241212	7.5	危険	FuseTalk	-	FuseTalk における SQL インジェクションの脆弱性	-	CVE-2007-3705	2012-06-26 15:46	2007-07-11	Show	GitHub Exploit DB Packet Storm

241213	7.5	危険	entertainment cms	-	Entertainment CMS における特定の管理アクションを実行される脆弱性	-	CVE-2007-3704	2012-06-26 15:46	2007-07-11	Show	GitHub Exploit DB Packet Storm

241214	7.5	危険	3com	-	TippingPoint IPS における特定のネットワークトラフィックの検知を回避される脆弱性	-	CVE-2007-3701	2012-06-26 15:46	2007-07-11	Show	GitHub Exploit DB Packet Storm

241215	7.8	危険	CA Technologies	-	CA ERwin Data Model Validator におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-3696	2012-06-26 15:46	2007-07-11	Show	GitHub Exploit DB Packet Storm

241216	10	危険	CA Technologies	-	CA ERwin Process Modeler の LICRCMD.EXE におけるバッファオーバーフローの脆弱性	-	CVE-2007-3695	2012-06-26 15:46	2007-07-11	Show	GitHub Exploit DB Packet Storm

241217	4.3	警告	getmiro	-	Miro Project Broadcast Machine の login.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-3694	2012-06-26 15:46	2007-11-14	Show	GitHub Exploit DB Packet Storm

241218	4.3	警告	gobi and helma	-	Helma の Gobi におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3693	2012-06-26 15:46	2007-07-11	Show	GitHub Exploit DB Packet Storm

241219	6.8	警告	av scripts	-	avtutorial の changePW.php における SQL インジェクションの脆弱性	-	CVE-2007-3691	2012-06-26 15:46	2007-07-11	Show	GitHub Exploit DB Packet Storm

241220	7.8	危険	Drupal	-	Drupal 用の Forward モジュールにおける制限された投稿を読まれる脆弱性	-	CVE-2007-3690	2012-06-26 15:46	2007-07-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290981	-	mandrakesoft conectiva gentoo linux redhat suse trustix	mandrake_multi_network_firewall linux linux_kernel mandrake_linux mandrake_linux_corporate_server enterprise_linux suse_linux secure_linux	Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.	NVD-CWE-Other	CVE-2004-0497	2017-10-11 10:29	2004-12-6	Show	GitHub Exploit DB Packet Storm

290982	-	rob_flynn gentoo mandrakesoft	gaim linux mandrake_linux	Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protoco…	NVD-CWE-Other	CVE-2004-0500	2017-10-11 10:29	2004-09-28	Show	GitHub Exploit DB Packet Storm

290983	-	sgi squirrelmail	propack squirrelmail	Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple …	NVD-CWE-Other	CVE-2004-0519	2017-10-11 10:29	2004-08-18	Show	GitHub Exploit DB Packet Storm

290984	-	open_webmail sgi squirrelmail	open_webmail propack squirrelmail	Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using …	NVD-CWE-Other	CVE-2004-0520	2017-10-11 10:29	2004-08-18	Show	GitHub Exploit DB Packet Storm

290985	-	sgi squirrelmail	propack squirrelmail	SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.	NVD-CWE-Other	CVE-2004-0521	2017-10-11 10:29	2004-08-18	Show	GitHub Exploit DB Packet Storm

290986	-	mandrakesoft suse conectiva engardelinux gentoo linux	mandrake_multi_network_firewall suse_email_server suse_linux_admin-cd_for_firewall suse_linux_connectivity_server suse_linux_database_server suse_linux_firewall_cd suse_linux_firewa…	The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally …	NVD-CWE-Other	CVE-2004-0535	2017-10-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

290987	-	avaya gentoo linux redhat suse conectiva	converged_communications_server modular_messaging_message_storage_server linux linux_kernel enterprise_linux suse_linux intuity_audix suse_email_server suse_linux_admin-cd_for…	Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and …	NVD-CWE-Other	CVE-2004-0554	2017-10-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

290988	-	sox conectiva gentoo redhat	sox linux enterprise_linux enterprise_linux_desktop fedora_core	Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.	NVD-CWE-Other	CVE-2004-0557	2017-10-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

290989	-	mandrakesoft gentoo linux trustix	mandrake_multi_network_firewall linux linux_kernel mandrake_linux mandrake_linux_corporate_server secure_linux	Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other process…	NVD-CWE-Other	CVE-2004-0565	2017-10-11 10:29	2004-12-6	Show	GitHub Exploit DB Packet Storm

290990	-	mandrakesoft redhat suse	mandrake_linux mandrake_linux_corporate_server fedora_core suse_linux	Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.	NVD-CWE-Other	CVE-2004-0587	2017-10-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed